Comments on: Phishing Phor Phishers http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/ Tales From the Inside! Sun, 22 Nov 2009 23:18:54 +0000 http://wordpress.org/?v=2.8.6 hourly 1 By: Meme http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-4/#comment-131511 Meme Mon, 29 Dec 2008 21:38:07 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-131511 Eh... I'm going to have to go with the minority that your wife isn't too smart, at least as far as being on the internet goes. She might be book smart, or what have you, but she is, along with many others, the reason phishers and scammers exist. Because they know for a fact that there are people stupid enough to fall for it. Eh… I’m going to have to go with the minority that your wife isn’t too smart, at least as far as being on the internet goes.
She might be book smart, or what have you, but she is, along with many others, the reason phishers and scammers exist. Because they know for a fact that there are people stupid enough to fall for it.

]]> By: Josh http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-4/#comment-95806 Josh Tue, 24 Jun 2008 18:54:55 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-95806 When the scammer reads this post, they'll search their inbox for "Jones" in the card name and get your info o.o When the scammer reads this post, they’ll search their inbox for “Jones” in the card name and get your info o.o

]]> By: DreamHost Blog » Mobile Spam http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-4/#comment-95756 DreamHost Blog » Mobile Spam Mon, 09 Jun 2008 21:56:51 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-95756 [...] My wife recently started a floral design business, and so she got a couple of those door magnets for our car advertising her business URL, phone number, and email address. [...] [...] My wife recently started a floral design business, and so she got a couple of those door magnets for our car advertising her business URL, phone number, and email address. [...]

]]> By: ab mitternacht wird zurückgephisht · Helge's Blog http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-4/#comment-81261 ab mitternacht wird zurückgephisht · Helge's Blog Thu, 05 Apr 2007 09:38:09 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-81261 [...] arme phisher: jones phisht jetzt retour. Tags: dreamhost , phishing Categories: Sideblog, Fun, [...] [...] arme phisher: jones phisht jetzt retour. Tags: dreamhost , phishing Categories: Sideblog, Fun, [...]

]]> By: Get Safe Online (The Blog) / Falling for phishing http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-4/#comment-30709 Get Safe Online (The Blog) / Falling for phishing Thu, 07 Dec 2006 15:24:41 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-30709 [...] The CEO of a US website hosting company, Dreamhost, recently made a splash with the revelation on his blog that his wife had fallen victim to an email con trick. [...] [...] The CEO of a US website hosting company, Dreamhost, recently made a splash with the revelation on his blog that his wife had fallen victim to an email con trick. [...]

]]> By: TBT Blog » Blog Archive » How To Prevent Phishing: Create Awareness http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-3/#comment-27308 TBT Blog » Blog Archive » How To Prevent Phishing: Create Awareness Wed, 22 Nov 2006 06:43:28 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-27308 [...] Phishing advice from Dreamhost [...] [...] Phishing advice from Dreamhost [...]

]]> By: EveryDigg » Blog Archive » DreamHost CEO Josh Jones’ Wife Falls for Phishing Scam http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-3/#comment-18247 EveryDigg » Blog Archive » DreamHost CEO Josh Jones’ Wife Falls for Phishing Scam Wed, 04 Oct 2006 12:10:14 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-18247 [...] Jones’ wife thought they were due for a fat tax refund do to a courteous IRS email. She promptly emailed away their Social Security and Visa Check Card Number. Josh stated, "But, believe it or not, my wife is not stupid. In fact, she has a PhD from Harvard! "read more | digg story [...] [...] Jones’ wife thought they were due for a fat tax refund do to a courteous IRS email. She promptly emailed away their Social Security and Visa Check Card Number. Josh stated, "But, believe it or not, my wife is not stupid. In fact, she has a PhD from Harvard! "read more | digg story [...]

]]> By: Falls Church Office Of Hearings And Appeals Social Security (News Dollar) http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-3/#comment-17705 Falls Church Office Of Hearings And Appeals Social Security (News Dollar) Fri, 29 Sep 2006 23:15:24 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-17705 [...] http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/ from http://digg.com/tech_news/DreamHost_CEO_Josh_Jones_Wife_Falls_for_Phishing_Scam .Jones’ wife thought they were due for a fat tax refund do to a courteous IRS email. She promptly emailed away their Social Security and Visa Check Card Number. Josh stated, “But, believe it or not, my wife is not stupid. In fact, she has a PhD from Harvard!”–Ant @ The Ant Farm: http://antfarm.ma.cx . Please do not IM/e-mail me for technical support. Use the forum (I check often)! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer. [...] [...] http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/ from http://digg.com/tech_news/DreamHost_CEO_Josh_Jones_Wife_Falls_for_Phishing_Scam .Jones’ wife thought they were due for a fat tax refund do to a courteous IRS email. She promptly emailed away their Social Security and Visa Check Card Number. Josh stated, “But, believe it or not, my wife is not stupid. In fact, she has a PhD from Harvard!”–Ant @ The Ant Farm: http://antfarm.ma.cx . Please do not IM/e-mail me for technical support. Use the forum (I check often)! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer. [...]

]]> By: daryl http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-3/#comment-16149 daryl Tue, 19 Sep 2006 15:27:45 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-16149 response #31 needs to be removed and the author shot. response #31 needs to be removed and the author shot.

]]> By: TheHeartSmasher http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/comment-page-3/#comment-15526 TheHeartSmasher Fri, 15 Sep 2006 01:37:41 +0000 http://blog.dreamhost.com/2006/08/31/phishing-phor-phishers/#comment-15526 Someone tried to get me. Warning to all of you. The server is in Japan. BankofAmerica doesn't exsist in Japan I don't think it does but they never send me emails why would they start now especially sending it to my yahoo account in which I don't use for bankofamerica. http://www.superbdevelopment.com/forums/main/showthread.php?p=509#post509 Is where the post is everyone is welcome to read it. Quote: X-Apparently-To:MyEmailAddress@.com via 216.252.110.237; Thu, 14 Sep 2006 09:45:22 -0700 X-YahooFilteredBulk: 196.200.176.80 X-Originating-IP: [196.200.176.80] Return-Path: Authentication-Results: mta150.mail.scd.yahoo.com from=bankofamerica.com; domainkeys=neutral (no sig) Received: from 196.200.176.80 (HELO etylkqk) (196.200.176.80) by mta150.mail.scd.yahoo.com with SMTP; Thu, 14 Sep 2006 09:45:22 -0700 Received: from xgnopu by etylkqk with local (Exim 4.42 (FreeBSD)) id 1GNsRv-000EZX-7R for MyEmailAddress@.com; Thu, 14 Sep 2006 16:44:19 +0200 To:MyEmailAddress@.com Subject: Important Notice - Bank of America From:"Bank of America" Content-Type: text/html;charset=iso-8859-1 Content-Transfer-Encoding: 7BIT Message-Id: Sender: User xgnopu Date: Thu, 14 Sep 2006 16:44:19 +0200 Content-Length: 1348 Quote: Your Online Banking is Blocked We recently reviewed your account, and suspect that your Bank of America account may have been accessed by an unauthorized third party. Protecting the security of your account is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features. To restore your account access, we need you to confirm your identity, to do so we need you to follow the link below and proceed to confirm your information: https://www.bankofamerica.com/cgi-bin/imcpprd. dll/Ctrl.jsp?BV_UseBVCookie=yes Tank you for your patience as we work together to protect your account. Sincerely, Bank of America Customer Service *Important* Please update your records on or before 48 hours, a failure to update your records will result in a temporal hold on your funds. Bank of America, N.A. Member FDIC. Equal Housing Lender © 2006 Bank of America Corporation. All rights reserved. Thing is this is not from bankofamerica Let me explain: https://www.bankofamerica.com/cgi-bin/imcpprd. dll/Ctrl.jsp?BV_UseBVCookie=yes The real address is: http://210.134.0.36/www.bankofamerica.com/index.htm Bank of america doesn't send emails they send actual mail. If they do send an email it would not have went to my yahoo account Trying to SCAM TheHeartSmasher haha :) I don't think so, guess they will be recieving a little something from yahoo very shortly :) This is the information collected on the owner of the actual ip address: Quote: Location: Japan ARIN says that this IP belongs to APNIC; I'm looking it up there. status = "Looking up at APNIC..."; NOTE: More information appears to be available at whois.nic.ad.jp. Using 0 day old cached answer (or, you can get fresh results). Displaying E-mail address (use sparingly -- this will make it more likely that you will trigger our rate limiting system). % [whois.apnic.net node-1] % Whois data copyright terms http://www.apnic.net/db/dbcopyright.html inetnum: 210.128.0.0 - 210.135.255.255 netname: JPNIC-NET-JP descr: Japan Network Information Center country: JP admin-c: JNIC1-AP tech-c: JNIC1-AP remarks: JPNIC Allocation Block remarks: Authoritative information regarding assignments and remarks: allocations made from within this block can also be remarks: queried at whois.nic.ad.jp. To obtain an English remarks: output query whois -h whois.nic.ad.jp x.x.x.x/e mnt-by: MAINT-JPNIC changed: apnic-ftp@nic.ad.jp 19991208 status: ALLOCATED PORTABLE source: APNIC role: Japan Network Information Center address: Kokusai-Kougyou-Kanda Bldg 6F, 2-3-4 Uchi-Kanda address: Chiyoda-ku, Tokyo 101-0047, Japan country: JP phone: +81-3-5297-2311 fax-no: +81-3-5297-2312 e-mail: hostmaster@nic.ad.jp admin-c: JI13-AP tech-c: JE53-AP nic-hdl: JNIC1-AP mnt-by: MAINT-JPNIC changed: hm-changed@apnic.net 20041222 changed: hm-changed@apnic.net 20050324 changed: ip-apnic@nic.ad.jp 20051027 source: APNIC inetnum: 210.134.0.0 - 210.134.0.255 netname: INAKER-ADMIN descr: INAKA-NET country: JP admin-c: MN125JP tech-c: KS689JP remarks: This information has been partially mirrored by APNIC from remarks: JPNIC. To obtain more specific information, please use the remarks: JPNIC WHOIS Gateway at remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client remarks: defaults to Japanese output, use the /e switch for English remarks: output) changed: apnic-ftp@nic.ad.jp 19970417 source: JPNIC Someone tried to get me.

Warning to all of you.

The server is in Japan. BankofAmerica doesn’t exsist in Japan I don’t think it does but they never send me emails why would they start now especially sending it to my yahoo account in which I don’t use for bankofamerica.

http://www.superbdevelopment.com/forums/main/showthread.php?p=509#post509

Is where the post is everyone is welcome to read it.

Quote:
X-Apparently-To:MyEmailAddress@.com via 216.252.110.237; Thu, 14 Sep 2006 09:45:22 -0700 X-YahooFilteredBulk: 196.200.176.80 X-Originating-IP: [196.200.176.80] Return-Path: Authentication-Results: mta150.mail.scd.yahoo.com from=bankofamerica.com; domainkeys=neutral (no sig) Received: from 196.200.176.80 (HELO etylkqk) (196.200.176.80) by mta150.mail.scd.yahoo.com with SMTP; Thu, 14 Sep 2006 09:45:22 -0700 Received: from xgnopu by etylkqk with local (Exim 4.42 (FreeBSD)) id 1GNsRv-000EZX-7R for MyEmailAddress@.com; Thu, 14 Sep 2006 16:44:19 +0200 To:MyEmailAddress@.com Subject: Important Notice – Bank of America From:”Bank of America” Content-Type: text/html;charset=iso-8859-1 Content-Transfer-Encoding: 7BIT Message-Id: Sender: User xgnopu Date: Thu, 14 Sep 2006 16:44:19 +0200 Content-Length: 1348

Quote:
Your Online Banking is Blocked
We recently reviewed your account, and suspect that your Bank of America account may have been accessed by an unauthorized third party. Protecting the security of your account is our primary concern. Therefore, as a preventative measure, we have temporarily limited access to sensitive account features. To restore your account access, we need you to confirm your identity, to do so we need you to follow the link below and proceed to confirm your information:
https://www.bankofamerica.com/cgi-bin/imcpprd. dll/Ctrl.jsp?BV_UseBVCookie=yes
Tank you for your patience as we work together to protect your account.
Sincerely,
Bank of America Customer Service
*Important*
Please update your records on or before 48 hours, a failure to update your records will result in a temporal hold on your funds.
Bank of America, N.A. Member FDIC. Equal Housing Lender
© 2006 Bank of America Corporation. All rights reserved.

Thing is this is not from bankofamerica

Let me explain:
https://www.bankofamerica.com/cgi-bin/imcpprd. dll/Ctrl.jsp?BV_UseBVCookie=yes

The real address is:
http://210.134.0.36/www.bankofamerica.com/index.htm

Bank of america doesn’t send emails they send actual mail.
If they do send an email it would not have went to my yahoo account

Trying to SCAM TheHeartSmasher haha :)
I don’t think so, guess they will be recieving a little something from yahoo very shortly :)

This is the information collected on the owner of the actual ip address:

Quote:
Location: Japan

ARIN says that this IP belongs to APNIC; I’m looking it up there.
status = “Looking up at APNIC…”;
NOTE: More information appears to be available at whois.nic.ad.jp.
Using 0 day old cached answer (or, you can get fresh results).
Displaying E-mail address (use sparingly — this will make it more likely that you will trigger our rate limiting system).

% [whois.apnic.net node-1]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

inetnum: 210.128.0.0 – 210.135.255.255
netname: JPNIC-NET-JP
descr: Japan Network Information Center
country: JP
admin-c: JNIC1-AP
tech-c: JNIC1-AP
remarks: JPNIC Allocation Block
remarks: Authoritative information regarding assignments and
remarks: allocations made from within this block can also be
remarks: queried at whois.nic.ad.jp. To obtain an English
remarks: output query whois -h whois.nic.ad.jp x.x.x.x/e
mnt-by: MAINT-JPNIC
changed: apnic-ftp@nic.ad.jp 19991208
status: ALLOCATED PORTABLE
source: APNIC

role: Japan Network Information Center
address: Kokusai-Kougyou-Kanda Bldg 6F, 2-3-4 Uchi-Kanda
address: Chiyoda-ku, Tokyo 101-0047, Japan
country: JP
phone: +81-3-5297-2311
fax-no: +81-3-5297-2312
e-mail: hostmaster@nic.ad.jp
admin-c: JI13-AP
tech-c: JE53-AP
nic-hdl: JNIC1-AP
mnt-by: MAINT-JPNIC
changed: hm-changed@apnic.net 20041222
changed: hm-changed@apnic.net 20050324
changed: ip-apnic@nic.ad.jp 20051027
source: APNIC

inetnum: 210.134.0.0 – 210.134.0.255
netname: INAKER-ADMIN
descr: INAKA-NET
country: JP
admin-c: MN125JP
tech-c: KS689JP
remarks: This information has been partially mirrored by APNIC from
remarks: JPNIC. To obtain more specific information, please use the
remarks: JPNIC WHOIS Gateway at
remarks: http://www.nic.ad.jp/en/db/whois/en-gateway.html or
remarks: whois.nic.ad.jp for WHOIS client. (The WHOIS client
remarks: defaults to Japanese output, use the /e switch for English
remarks: output)
changed: apnic-ftp@nic.ad.jp 19970417
source: JPNIC

]]>